Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37302e302f32342d3234203d3e20323632313832.roa
File:                     3230302e3130382e37302e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          6y8cuu50UrV73oEoonmiFWBWPXIgO2NItj5r49hXbwQ=
Subject key identifier:   20:06:06:E8:97:63:1F:1E:6D:B9:09:08:65:26:1B:0B:D1:1F:B4:44
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       681E71BA5AE6BBF892047AA28394BFBDC33E23AE
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37302e302f32342d3234203d3e20323632313832.roa
Signing time:             Tue 05 Mar 2024 17:50:11 +0000
ROA not before:           Tue 05 Mar 2024 17:45:11 +0000
ROA not after:            Tue 04 Mar 2025 17:50:11 +0000
asID:                     262182
IP address blocks:        200.108.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1e:71:ba:5a:e6:bb:f8:92:04:7a:a2:83:94:bf:bd:c3:3e:23:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Mar  5 17:45:11 2024 GMT
            Not After : Mar  4 17:50:11 2025 GMT
        Subject: CN=200606E897631F1E6DB9090865261B0BD11FB444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:97:7b:2e:d9:e1:31:df:a9:6a:e4:28:04:
                    99:95:3b:0c:6b:e8:5e:ea:8b:5c:a1:97:5c:d3:c8:
                    d9:53:80:8f:8b:fc:7a:39:cd:19:a4:cb:78:0f:74:
                    d7:58:05:60:b2:c5:57:4d:3f:4e:5f:58:65:96:48:
                    05:8d:9c:a9:6c:92:0f:9f:9b:97:be:06:7f:fe:46:
                    72:f4:b6:dc:0a:63:c7:f2:58:29:11:77:78:91:67:
                    b2:1e:dc:92:cc:4d:cd:f6:4d:92:07:c4:f1:d7:73:
                    29:16:80:51:ea:8e:f4:66:83:8d:8e:7e:96:ae:ef:
                    6b:d7:4b:bb:5d:72:ca:cd:47:a1:84:6a:e1:8b:56:
                    bf:ae:4b:08:ba:8b:4e:e7:17:a5:da:f6:2e:06:fe:
                    92:82:71:db:90:de:40:62:e2:03:e8:5b:16:e1:01:
                    4f:4d:aa:07:b8:5b:e4:f5:75:ad:1d:28:86:65:7e:
                    21:64:f1:0d:29:58:cd:01:a1:38:52:ad:0f:8a:31:
                    cf:1d:84:1d:86:72:51:bd:a9:34:90:b2:1a:65:d8:
                    f4:0e:f2:14:4e:05:05:ab:be:ef:1c:ae:ae:90:b2:
                    63:63:0a:1d:08:75:94:12:92:b3:1b:94:56:2f:f1:
                    f0:23:b7:8e:a7:3a:fa:21:d6:40:e0:c2:95:57:d5:
                    b2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:06:06:E8:97:63:1F:1E:6D:B9:09:08:65:26:1B:0B:D1:1F:B4:44
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37302e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:fe:2f:f0:4b:53:cf:37:ca:c1:a4:7d:05:1c:25:8b:dd:a0:
         a8:3b:2d:a1:9a:bd:84:7c:a9:31:66:3b:69:11:d1:9c:77:7c:
         0f:db:5f:91:1b:ce:77:da:fc:e4:6a:d8:b7:35:2f:4a:37:a9:
         0d:21:9a:3c:97:d5:be:77:23:df:83:c8:73:c4:36:df:ff:ad:
         36:8f:9e:76:0f:55:d8:06:ec:a1:a4:31:e2:2a:d3:27:3b:a9:
         05:65:e7:6c:63:fe:f6:39:3b:33:18:ec:e3:0b:9d:c2:47:56:
         c4:1a:60:e6:6b:c9:00:1b:15:58:97:bc:da:43:2b:55:05:4a:
         92:4c:ff:72:1d:2e:9c:82:af:48:a7:ce:bf:b7:f8:c9:55:f7:
         43:4e:aa:e6:5a:11:ad:8b:eb:06:12:d1:16:d2:88:9e:d1:5e:
         9d:ab:4f:52:31:c7:4e:f6:37:6f:d7:d8:14:5f:da:d0:7d:79:
         b1:10:07:e2:b3:88:f5:7e:03:7b:45:da:c2:dd:56:b7:2b:73:
         0b:92:bb:d9:a5:40:68:d0:bc:08:ed:10:90:5d:31:6d:2b:6b:
         4d:04:2c:2d:a9:a8:66:42:e1:d5:b0:0d:de:e0:bb:6d:58:c9:
         73:d3:1a:2d:a1:93:ce:27:d1:00:ec:60:b0:95:8b:e0:e0:ef:
         7a:cb:cb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 23:51:36 2024 by rpki-client on console-ams.rpki-client.org